1ab989841d44f87771e335ff22bb53f3 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

1ab989841d44f87771e335ff22bb53f3
Size

281KB
MD5

1ab989841d44f87771e335ff22bb53f3
SHA1

8e7ffeb1bb5dba1b76002c46aca03574b861ef73
SHA256

cb729fff42104c50c867dbcdb48a826a2e5cfdac82007b16c31b4e53f2860d3c
SHA512

32e5cf8fb7af8220ac26cbe786d4ffb3dfbb058731221f73f3cd1e854bc60e03022e52ac2c05f0232fcaef58d20239faf35cb1808cd42f11ba2b45a107772a06
SSDEEP

6144:V5Ng3zC7e0mOgBCmlK1qoV90ylC8lyhD8kBoi7MK/U:V5N4b0mlBCJ1H9ZlHlo5oic

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ab989841d44f87771e335ff22bb53f3

Files

1ab989841d44f87771e335ff22bb53f3
.exe windows:4 windows x86 arch:x86

100ef957a9b7a8cd6d8b8b3e0f61d357

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetOEMCP
SetEvent
CreateMutexA
GetThreadLocale
VirtualAlloc
AddAtomA
GetThreadTimes
GetExitCodeThread
GetModuleHandleA
TlsFree
GetDefaultCommConfigA
GetLargestConsoleWindowSize
CompareStringA
GetUserDefaultLangID
PulseEvent
ReleaseMutex
CallNamedPipeA
IsDBCSLeadByte
GetThreadPriority
TlsGetValue
GetConsoleCP

user32

GetDC
ReleaseDC
ValidateRect
CloseWindow
IsWindowVisible
GetClassNameA
RegisterClassA
GetFocus
GetActiveWindow
ReleaseDC
ShowWindow
InvalidateRect
GetWindowTextA
GetWindowTextLengthA
IsIconic
GetClassInfoExA
GetSystemMetrics
GetWindow
GetForegroundWindow

tapi32

MMCSetLineInfo
MMCInitialize
MMCSetServerConfig
MMCShutdown
MMCSetPhoneInfo

mlang

DllGetClassObject

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 876KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 94KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ